Relative Content

Tag Archive for azureazure-iot-edge

EC key instead of RSA key generated when using “bootstrap_identity”

I try to implement the ‘Automatic certificate management with EST server’ using the ‘bootstrap_identity’ certificate as describe under item #4 of the above link. This scenario is also documented under ‘DPS X.509-based provisioning’. However, with this configuration IoT Edge generates an EC key for the ‘identity’ certificate instead of an RSA key (as for the device certificate). The PKI EST service doesn’t accept a mix of EC and RSA certificates and rejects the CSR (see syslog extract below).